CreateCoreShell
GetSoundShell
_GetDecryptProc@4
_GetEncryptProc@4
_SetDecryptionKey@4
Static task
static1
Behavioral task
behavioral1
Sample
46487befb7e019aefc36fccb5ce280a0_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
46487befb7e019aefc36fccb5ce280a0_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Target
46487befb7e019aefc36fccb5ce280a0_JaffaCakes118
Size
2.9MB
MD5
46487befb7e019aefc36fccb5ce280a0
SHA1
7d8fdf3e19c0b7afcadc834de5fbcfff252e97f1
SHA256
ba473c070d5c7bd383e2f84443ea3fda97397245320cd158f77af4c61148a88b
SHA512
662422743a1ce872d4d64259d0af6e799dd3d3bec2cff0b38440de44ce88bad908663b0dec424e076c19711e6250110e630deced2b7c3f1704eeefa99e82f43e
SSDEEP
49152:hsJqGtkrgsr35A/VzsI74QACY6zR5CxSVMlj3Of9fzYA:PG0gsb5ufrzSjkhzY
Checks for missing Authenticode signature.
resource |
---|
46487befb7e019aefc36fccb5ce280a0_JaffaCakes118 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateCoreShell
GetSoundShell
_GetDecryptProc@4
_GetEncryptProc@4
_SetDecryptionKey@4
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE